s3: smbd: SMB1 add range checks to reply_search().